We also mirror the publicly available ("recommended") OS patches released by Sun. There's a script you can download and run periodically which will tell you which patches your computer needs installed in order to be up-to-date.
Of course, it's a good idea to try to keep other (third-party) software up-to-date as well, to help both performance and security.